Marcus Jeffes
Solutions Architect
Marcus brings his SOC background to Elastic, where he is exploring modern ways that we can apply AI to SOC operations.
Monitoring AI agent sessions: Leveraging embedding models to aid threat hunting and attack discovery workflows
Security Labs
Monitoring AI agent sessions: Leveraging embedding models to aid threat hunting and attack discovery workflows
I tested vector search on 7,454 turns of my own agent sessions. One in seven sessions needed review, the agent’s reasoning carried more signal than the prompt, and the stored vectors answer questions nobody thought to ask at ingest.